Package: claws-mail Version: 3.14.0-1 Severity: normal Claws cannot connect to LDAP server when TLS is on with following error:
LDAP Error(tls): ldap_start_tls_s: -1 The TLS connection was non-properly terminated. If I disable TLS then claws works with LDAP server. Content of /etc/ldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. #BASE dc=example,dc=com #URI ldap://ldap.example.com ldap://ldap-master.example.com:666 #SIZELIMIT 12 #TIMELIMIT 15 #DEREF never # TLS certificates (needed for GnuTLS) TLS_CACERT /etc/ssl/certs/ca-certificates.crt I tried to check LDAP server using ldapserver with TLS - everyting works fine: ldapsearch -ZZ -H ldap://ldap-hostname:389/ -W -D ldap-bind-creds '(mail=*)' mail -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 3.16.0-4-686-pae (SMP w/4 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/dash Init: unable to detect Versions of packages claws-mail depends on: ii libatk1.0-0 2.21.90-2 ii libc6 2.24-2 ii libcairo2 1.14.6-1+b1 ii libcompfaceg1 1:1.5.2-5 ii libdb5.3 5.3.28-12 ii libdbus-1-3 1.10.10-1 ii libdbus-glib-1-2 0.108-1 ii libenchant1c2a 1.6.0-11+b1 ii libetpan17 1.6-1+b1 ii libfontconfig1 2.11.0-6.7 ii libfreetype6 2.6.3-3+b1 ii libgdk-pixbuf2.0-0 2.35.5-1 ii libglib2.0-0 2.49.7-1 ii libgnutls30 3.5.4-2 ii libgtk2.0-0 2.24.31-1 ii libice6 2:1.0.9-1+b1 ii libldap-2.4-2 2.4.42+dfsg-2+b2 ii liblockfile1 1.09-6 ii libpango-1.0-0 1.40.2-1 ii libpangocairo-1.0-0 1.40.2-1 ii libpangoft2-1.0-0 1.40.2-1 ii libpisock9 0.12.5-dfsg-2+b1 ii libsasl2-2 2.1.26.dfsg1-15 ii libsm6 2:1.2.2-1+b1 ii xdg-utils 1.1.1-1 ii zlib1g 1:1.2.8.dfsg-2+b1 Versions of packages claws-mail recommends: ii aspell-en [aspell-dictionary] 2016.06.26-0-0.1 ii claws-mail-i18n 3.14.0-1 ii xfonts-100dpi 1:1.0.4+nmu1 Versions of packages claws-mail suggests: pn claws-mail-doc <none> pn claws-mail-tools <none> pn gedit | kwrite | mousepad | nedit <none> pn www-browser <none> -- no debconf information